Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/357c6622-9161-44d7-ab13-6ea6e0bed2e9.roa
File:                     357c6622-9161-44d7-ab13-6ea6e0bed2e9.roa (raw, json)
Hash identifier:          XyrP65vPuHqUeiPC+yrHwhjFg5yuL8qWRJubsw3RqPA=
Subject key identifier:   74:15:8D:D6:F1:B3:D5:06:C7:E7:92:55:2F:78:82:06:F2:E6:BB:E3
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0BA4574B6923ADA46B2963834C82AB3EA49EE8B3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/357c6622-9161-44d7-ab13-6ea6e0bed2e9.roa
Signing time:             Fri 11 Jul 2025 19:20:43 +0000
ROA not before:           Fri 11 Jul 2025 19:20:43 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a4:57:4b:69:23:ad:a4:6b:29:63:83:4c:82:ab:3e:a4:9e:e8:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 11 19:20:43 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=93a1d7b9bef467bb5c21918c26d8b8babde644449a958966f9cff27e55af9249, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fc:a9:f4:c4:0a:48:ac:d2:76:f9:a0:ca:b5:
                    bc:09:1b:0b:fe:90:c9:f0:22:36:93:8c:d0:7d:66:
                    e6:02:31:f3:93:f2:24:e9:04:bb:15:af:c8:de:c9:
                    d4:0b:47:c9:51:91:de:e4:8c:f3:8f:e3:51:ee:59:
                    36:24:a7:d4:a1:b6:73:f4:7b:b5:26:0f:96:bf:e8:
                    70:8f:e9:3e:f2:b8:ab:28:79:be:4f:8d:a1:8a:55:
                    d9:90:c8:32:0f:33:ad:57:eb:0f:50:4e:2f:f6:14:
                    40:b5:01:13:c9:50:59:2d:62:ca:c7:a9:7c:0b:75:
                    65:0c:73:13:d1:7f:06:c3:5e:3f:a1:27:f8:9e:60:
                    6e:85:d2:5e:4e:42:8a:66:74:d1:47:23:d2:2d:5e:
                    1f:d7:65:1e:e5:88:1e:8b:ab:a9:a3:2e:c2:50:2e:
                    4b:71:e9:4a:9d:04:04:77:ed:c7:33:f9:31:f8:72:
                    47:d3:c3:db:eb:ba:5d:ea:83:01:26:72:23:2d:40:
                    2e:cf:ef:e7:49:9e:32:e0:72:fc:3b:36:9e:b2:99:
                    09:a9:e9:a9:4c:87:e4:eb:73:06:52:be:9b:da:49:
                    ee:06:ac:4c:23:8a:b7:ac:ac:26:38:27:b8:40:02:
                    4c:aa:0b:73:0c:24:c4:02:06:dc:c9:f4:8c:5b:d1:
                    0c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:15:8D:D6:F1:B3:D5:06:C7:E7:92:55:2F:78:82:06:F2:E6:BB:E3
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/357c6622-9161-44d7-ab13-6ea6e0bed2e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:74:0c:df:17:da:4d:77:cb:53:d2:41:3d:f3:b7:ec:1d:f3:
         9d:e7:4e:76:c5:03:ce:ad:45:21:74:96:e8:b9:43:79:cf:ac:
         42:84:25:19:9e:f3:6e:44:6e:6d:dc:65:59:98:ab:bc:aa:6d:
         6a:86:a7:a1:41:05:df:bc:45:11:12:5e:7b:b5:fe:84:e1:dd:
         55:d8:a4:3a:a5:e6:b4:86:2c:c4:06:a6:bf:9f:75:7e:aa:b9:
         3a:88:0e:75:e0:59:0e:36:c9:25:d8:e6:0c:ab:28:9c:5b:c8:
         97:9e:62:32:81:09:b4:9c:bb:ab:2c:1c:bf:ea:7e:81:a2:c8:
         98:58:1c:95:ad:85:62:c3:88:88:2b:d5:da:01:7f:3d:df:d0:
         7e:41:ca:0d:5f:d7:14:80:86:fd:b0:36:b5:6d:cc:ad:36:e3:
         96:85:30:c7:44:55:a2:38:b5:ca:3a:92:0e:b5:a8:42:39:f3:
         48:c2:12:a3:87:45:bd:09:eb:ea:29:1a:04:e8:e2:06:1c:03:
         1f:79:9f:2e:8e:0b:cc:f4:d8:cd:bf:cf:ed:8e:01:29:70:b2:
         cd:9d:40:f3:cf:1d:ec:1f:7b:19:58:c3:ca:ec:07:af:d1:f1:
         4e:c8:8e:67:14:ef:ad:06:49:64:97:1c:69:de:81:4a:2a:f6:
         6d:fd:28:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----